Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-112788. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Travel Tours Script v2.0 via multiple parameters in the front.php endpoint. The PoC provides a URL with injectable parameters (e.g., 'direction', 'type', 'rating_from') that can be manipulated to execute arbitrary SQL queries.
Description
Travel Tours Script 2.0 - SQL Injection
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Travel Tours Script v2.0 via multiple parameters in the front.php endpoint. The PoC provides a URL with injectable parameters (e.g., 'direction', 'type', 'rating_from') that can be manipulated to execute arbitrary SQL queries.